$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: hqbBpeEjzGmtkbZvv0WRgI7G0KNTRxDUKOkd9Z4G/nE= Subject key identifier: 5B:BB:20:B9:F2:8A:24:A3:97:E5:DA:93:63:4E:92:33:C8:CC:EC:7F Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 08820B0CBDB3A28632A77854862DDC12AB30AF2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:26:27 +0000 Manifest this update: Thu 23 Jul 2026 13:21:27 +0000 Manifest next update: Fri 24 Jul 2026 15:56:27 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) 2: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) 3: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) 4: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) 5: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: NdAhkywDx4TbecbH7+KRDQosTORyy52xaIONjpKEBZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:82:0b:0c:bd:b3:a2:86:32:a7:78:54:86:2d:dc:12:ab:30:af:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: Jul 23 13:21:27 2026 GMT Not After : Jul 24 15:56:27 2026 GMT Subject: CN=5BBB20B9F28A24A397E5DA93634E9233C8CCEC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:49:6e:71:05:b3:fe:36:d5:71:da:e6:b8: 7b:99:b6:30:79:87:94:6f:23:8d:a9:5c:8a:e2:79: 7e:23:6c:67:3d:ae:25:73:04:f4:59:81:70:a2:b9: a2:6e:e5:17:20:95:99:49:ed:4d:4d:40:3d:34:f3: 6e:e4:f7:33:ee:fe:82:f6:64:a8:ab:e0:a5:32:32: d5:25:dd:c9:61:e1:9d:71:59:83:b2:96:3d:60:fd: c1:da:56:42:6a:d3:24:dd:0e:df:81:8c:f1:fb:1a: 40:96:54:e0:43:67:c4:c0:0c:ee:a2:49:cf:28:ed: 0e:03:1f:b1:76:e8:0f:b4:a5:6c:38:04:8c:6a:12: ba:69:7a:f1:15:8d:cc:48:0a:da:0e:fb:05:ab:b9: ee:bd:71:9b:2f:4a:71:f5:60:3f:0d:67:eb:f1:8e: aa:e4:65:50:b1:25:db:fa:f7:46:2e:62:fa:0b:14: a4:56:aa:a6:71:c6:65:46:0c:cd:02:21:17:9f:59: 23:ca:a4:6b:30:a1:da:7a:15:b2:ea:d2:c0:cd:ac: ea:fc:ae:17:6e:5f:78:cb:4f:1e:a2:64:0f:be:d0: 4c:4b:ec:6b:b0:16:c3:0c:5f:bd:26:e2:7c:22:cc: 2c:b6:a5:a0:b4:39:e7:a8:f9:11:ac:4c:7a:07:91: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BB:20:B9:F2:8A:24:A3:97:E5:DA:93:63:4E:92:33:C8:CC:EC:7F X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:29:23:67:d9:7f:8d:f5:a8:a9:81:cb:dc:4e:fa:42:da:9a: 95:3e:87:82:bb:11:24:fa:06:b7:e7:5d:47:05:1e:a3:46:62: 51:ec:a2:14:ca:bb:55:91:c3:75:28:5f:9d:09:60:9e:5b:d6: 2f:76:d9:f0:e7:20:87:5b:37:8e:15:6d:66:ab:a7:44:d6:47: 36:c2:4e:ba:dd:d4:6f:2d:b0:9a:60:b5:43:36:2e:3f:9c:da: 4e:16:37:9c:0d:07:9f:ac:ad:de:90:bf:9c:a7:9d:59:6f:54: 44:01:17:94:a1:3a:2f:39:c3:27:52:86:dc:63:a8:3e:09:3e: ce:bf:d8:03:21:e6:23:b0:19:f6:d4:0b:e5:2d:54:2d:0e:17: a5:b3:8b:5d:57:1f:5b:69:15:ac:63:06:b2:db:17:32:fc:f8: 78:97:01:6c:a3:03:52:2e:b3:0b:15:6a:d0:f9:7a:d6:cc:86: db:47:f3:c0:ab:92:7c:75:40:84:07:9e:78:64:2d:60:c4:b7: 74:c3:6d:4d:9b:fe:fb:82:e4:cb:bf:e3:02:6a:72:06:36:0a: 40:d2:00:e8:46:45:f7:ac:d7:ef:c6:7b:e4:44:47:5d:5b:7d: cb:64:34:d7:d1:09:be:ff:f0:f3:bd:4c:89:cd:84:07:5c:34: b8:3d:0c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIILDL2zooYyp3hUhi3cEqswryowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA3MjMxMzIxMjdaFw0yNjA3MjQxNTU2MjdaMDMxMTAvBgNV BAMTKDVCQkIyMEI5RjI4QTI0QTM5N0U1REE5MzYzNEU5MjMzQzhDQ0VDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6klucQWz/jbVcdrmuHuZtjB5 h5RvI42pXIrieX4jbGc9riVzBPRZgXCiuaJu5RcglZlJ7U1NQD00827k9zPu/oL2 ZKir4KUyMtUl3clh4Z1xWYOylj1g/cHaVkJq0yTdDt+BjPH7GkCWVOBDZ8TADO6i Sc8o7Q4DH7F26A+0pWw4BIxqErppevEVjcxICtoO+wWrue69cZsvSnH1YD8NZ+vx jqrkZVCxJdv690YuYvoLFKRWqqZxxmVGDM0CIRefWSPKpGswodp6FbLq0sDNrOr8 rhduX3jLTx6iZA++0ExL7GuwFsMMX70m4nwizCy2paC0Oeeo+RGsTHoHkVKTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7sgufKKJKOX5dqTY06SM8jM7H8wHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwpI2fZf431qKmBy9xO+kLampU+h4K7EST6 BrfnXUcFHqNGYlHsohTKu1WRw3UoX50JYJ5b1i922fDnIIdbN44VbWarp0TWRzbC Trrd1G8tsJpgtUM2Lj+c2k4WN5wNB5+srd6Qv5ynnVlvVEQBF5ShOi85wydShtxj qD4JPs6/2AMh5iOwGfbUC+UtVC0OF6Wzi11XH1tpFaxjBrLbFzL8+HiXAWyjA1Iu swsVatD5etbMhttH88Crknx1QIQHnnhkLWDEt3TDbU2b/vuC5Mu/4wJqcgY2CkDS AOhGRfes1+/Ge+RER11bfctkNNfRCb7/8PO9TInNhAdcNLg9DIk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:28 2026 by rpki-client